Update CopilotKit dependencies to v1.63.1 by renovate[bot] · Pull Request #8 · CopilotKit/mcp-client

renovate · 2026-05-26T18:09:45Z

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Change	Age	Confidence
@copilotkit/react-core	`1.6.0` → `1.63.1`
@copilotkit/react-ui	`1.6.0` → `1.63.1`
@copilotkit/runtime	`1.6.0` → `1.63.1`
@copilotkit/runtime-client-gql	`1.8.4` → `1.63.1`

Release Notes

CopilotKit/CopilotKit (@copilotkit/react-core)

`v1.63.1`

Compare Source

Release v1.63.1

`v1.63.0`

Compare Source

Release v1.63.0

CopilotKit v1.60.2

A patch release on the 1.60 line. Headline: a sweep of @copilotkit/react-core chat-surface stability fixes — pin-to-send scrolling, scoped Streamdown markdown styles, thread-header refresh on provider updates, an awaited useInterrupt resolve, and dark-mode default tool rendering — landing alongside agent-native Slack APIs (assistant pane + native streaming, default-on) in @copilotkit/bot-slack 0.0.2 (#5447). This cut also adds a runtime A2UI opt-out predicate (#5385), fixes Angular OnPush rendering on addMessage (#5418), and rides @ag-ui/* 0.0.57.

Install

npm install @&#8203;copilotkit/react-core@1.60.2 @&#8203;copilotkit/react-ui@1.60.2 @&#8203;copilotkit/runtime@1.60.2

Features

@copilotkit/bot-slack: agent-native Slack APIs (0.0.2) — adds the Slack assistant pane and native streaming, on by default, and enables them in the Slack example. (#5447)
@copilotkit/runtime: A2UI enabled opt-out — a shared isA2UIEnabled predicate lets you opt out of A2UI injection instead of it being implicitly on. (#5385)

Fixes

@copilotkit/react-core: stabilize pin-to-send scrolling — keeps the user message pinned without the jump/drift on send. (#5386)
@copilotkit/react-core: scope Streamdown markdown styles — markdown styling (including mermaid blocks and sub/superscript) is scoped so it no longer leaks into the surrounding app. (#5099)
@copilotkit/react-core: refresh thread headers on provider updates — thread headers re-render when the provider changes instead of showing stale titles. (#5300)
@copilotkit/react-core: await runAgent in useInterrupt::resolve — the resolve path now awaits the agent run (and propagates through demo-local hooks) so resume completes deterministically. (#5461)
@copilotkit/react-core: dark-mode default tool rendering — the default tool renderer now has dark-theme styling. (#5455)
@copilotkitnext/angular: OnPush views render on addMessage — emit a fresh messages array so OnPush change detection picks up appended messages. (#5418)
@copilotkit/vue: keep the user message pinned — adjust the pin-to-send spacer in both directions. (#5423)
@copilotkit/shared: preserve lambda client CJS export — restores the lambda client export in the CommonJS build. (#5419)
@copilotkit/web-inspector: persist announcement popout dismissal — dismissing the announcement popout via its X control now sticks. (#5448)

Dependencies

@ag-ui/* stays at 0.0.57 — no version change from 1.60.1; @ag-ui/core / @ag-ui/client / @ag-ui/encoder at 0.0.57, @ag-ui/langgraph at 0.0.41, @ag-ui/a2ui-middleware at 0.0.8.

Docs

Vue quick start guide (#5492), @copilotkit/react-native reference docs (#5397), and Built-in Agent docs served at the docs root (#5404).
Renamed premium docs sections to Enterprise / Intelligence platform (#5511).

CI / release

One-click canary publish orchestrator + release-pipeline lint guards — a canary publish workflow plus lint and scope-drift guards for the release pipelines. (#5370)

Packages republished at `1.60.2`

@copilotkit/runtime, @copilotkit/react-core, @copilotkit/react-ui, @copilotkit/react-native, @copilotkit/core, @copilotkit/shared, @copilotkit/runtime-client-gql, @copilotkit/sdk-js, @copilotkit/vue, @copilotkit/voice, @copilotkit/web-inspector, @copilotkit/a2ui-renderer, @copilotkit/react-textarea, @copilotkit/sqlite-runner, and @copilotkit/agentcore-runner. @copilotkit/bot and @copilotkit/bot-slack republished at 0.0.2.

`v1.60.1`

Compare Source

CopilotKit v1.60.1

A patch release on the 1.60 line. It bumps @ag-ui/* to 0.0.57 — picking up the @ag-ui/client transport fetch fix and adapting @copilotkit/bot-slack to the new runHttpRequest signature (#5408) — alongside internal test-infrastructure and example hardening.

Install

npm install @&#8203;copilotkit/react-core@1.60.1 @&#8203;copilotkit/react-ui@1.60.1 @&#8203;copilotkit/runtime@1.60.1

Dependencies

@ag-ui/* bumped to 0.0.57 — @ag-ui/core, @ag-ui/client, @ag-ui/encoder 0.0.56 → 0.0.57 across packages, picking up the @ag-ui/client transport fetch fix; @ag-ui/langgraph at 0.0.41, @ag-ui/a2ui-middleware at 0.0.8. @copilotkit/bot-slack adapts its runHttpRequest call to the 0.0.57 fetch-thunk signature. (#5408)

Docs

CopilotKit skills migrated to the v2 API — the bundled CopilotKit skills now target the v2 API (useAgent etc.). (#5394)

Packages republished at `1.60.1`

@copilotkit/runtime, @copilotkit/react-core, @copilotkit/react-ui, @copilotkit/react-native, @copilotkit/core, @copilotkit/shared, @copilotkit/runtime-client-gql, @copilotkit/sdk-js, @copilotkit/vue, @copilotkit/voice, @copilotkit/web-inspector, @copilotkit/a2ui-renderer, @copilotkit/react-textarea, @copilotkit/sqlite-runner, and @copilotkit/agentcore-runner.

`v1.60.0`

Compare Source

CopilotKit v1.60.0

A minor release on the 1.60 line. Headline: the new @copilotkit/bot family — a platform-agnostic bot engine, a cross-platform JSX UI runtime, and a Slack platform adapter (#5274) — debuts alongside the AG-UI A2UIToolParams single-arg API on @ag-ui 0.0.56 (#5339). This cut also scopes the A2UI catalog context per-agent instead of broadcasting it into every run (#5369), makes a single unhealthy MCP server non-fatal to a run, threads app-user IDs through Intelligence thread reads and deletes (#5389), and fixes the Intelligence indicator icon that rendered blank outside Chrome (#5316).

Install

npm install @&#8203;copilotkit/react-core@1.60.0 @&#8203;copilotkit/react-ui@1.60.0 @&#8203;copilotkit/runtime@1.60.0

New packages

@copilotkit/bot, @copilotkit/bot-ui, @copilotkit/bot-slack (0.0.1) — A new family for building AG-UI agents into chat platforms, landing the production rework of the earlier Slack PoC (#4883).
- bot — a platform-agnostic engine: createBot with onMention/onMessage/onInterrupt/onCommand handler registration, the agent run/tool/interrupt loop, content-stable JSX action binding with cold-path rehydration from a pluggable ActionStore, the PlatformAdapter boundary, capability-gated thread methods, a shared BotToolContext, defineBotTool/defineBotCommand, and typed interaction/interrupt handlers (ships fake-adapter/fake-agent test utilities).
- bot-ui — a JSX runtime, intermediate representation, and a cross-platform component vocabulary.
- bot-slack — a Slack adapter: JSX → Block Kit rendering with per-element budgets and graceful degradation, Socket Mode ingress, opaque-id interactions (ack within 3 s, run async), chat.update streaming with chunking, accent attachments, and sender-profile resolution. Bolt initialization is deferred to start().
- A 100% JSX Slack on-call triage bot example (over Linear + Notion MCP) ships under examples/slack — issue/page cards, tables, Chart.js charts, Mermaid diagrams, a confirm_write HITL gate, and /agent + /triage slash commands. (#5274)

Features

A2UI adopts the single-arg A2UIToolParams API — getA2UITools / get_a2ui_tools in the LangGraph middlewares now take one A2UIToolParams object (model inside), with composition_guide folded into the guidelines bag. Counterpart to ag-ui#1894, which re-enables A2UI generation and design guidelines via the shared params bag. (#5339, #5314)

Fixes

@copilotkit/core / runtime / react-core / vue: scope A2UI context per agent — the A2UI catalog context was being injected into every agent's runs. Context entries are now scoped per-agent, the runtime info response forwards per-agent A2UI scoping, and the a2ui agent list is preserved through the core context path — so only the runtime's designated a2ui agents receive the catalog. (#5369, #5383)
@copilotkit/runtime: MCP server failures are non-fatal — a single unavailable MCP server (down, 5xx, timeout, bad auth) no longer fails the whole run. It's skipped with an error log and the run continues with the healthy servers and the agent's own tools. (#5274)
@copilotkit/runtime: pass app-user IDs to Intelligence thread reads — the Intelligence REST API now requires explicit app-user ownership for direct thread reads, message-history lookups, and destructive thread mutations. Runtime now threads the resolved userId (and agentId on deletes) through those calls as route params; create/list/connect/lock already sent it. Wire-contract assertions added to the runtime tests. (#5389)
@copilotkit/react-core: Intelligence indicator icon renders cross-browser — the indicator's spinner→checkmark icon was blank in Safari and Firefox because its geometry lived in the Blink-only CSS d: property. Geometry moved to the SVG d attribute, replaced the Chrome-only path-morph with two overlaid static shapes (a fading spinning arc + a self-drawing checkmark), and rotated the arc via transform-box: fill-box; transform-origin: center so it renders instantly and on-center in every engine. (#5316)
@copilotkit/core: adapt to @ag-ui/client 0.0.56's runHttpRequest — 0.0.56 changed runHttpRequest from (url, requestInit) to a fetch-thunk signature (() => Promise<Response>). The single-route and connect transport paths in ProxiedCopilotRuntimeAgent now wrap the request as () => this.fetch(url, init), restoring the envelope transports; @ag-ui/* added to minimum-release-age-exclude so the fresh publish installs in CI. (#5344)
@copilotkit/shared / a2ui-renderer: repair check-types rot — define license context types locally (drop the dead LicenseMode redefinition), remove dead 0.8-era a2ui-renderer viewer files, and resolve Angular workspace paths to dist first in typecheck. (#5356)
@copilotkit/web-inspector: Node 25 compatibility — shim localStorage in the vitest setup so the suite runs on Node 25. (#5274)
@copilotkitnext/angular: support Angular 19–21 install — widen the @angular/* peer range to ^19 || ^20 || ^21 (a clean install on Angular 20/21 no longer needs --legacy-peer-deps) and correct the README to the real package name @copilotkitnext/angular. Rides the separate @copilotkitnext/angular version line (not part of the 1.60.0 republish). (#5342)

Dependencies

@ag-ui/* bumped to 0.0.56 — @ag-ui/core, @ag-ui/client, @ag-ui/encoder 0.0.53 → 0.0.56 across all packages; @ag-ui/langgraph at 0.0.41, @ag-ui/a2ui-middleware at 0.0.8. (#5339, #5344)

Packages republished at `1.60.0`

@copilotkit/runtime, @copilotkit/react-core, @copilotkit/react-ui, @copilotkit/react-native, @copilotkit/core, @copilotkit/shared, @copilotkit/runtime-client-gql, @copilotkit/sdk-js, @copilotkit/vue, @copilotkit/voice, @copilotkit/web-inspector, @copilotkit/a2ui-renderer, @copilotkit/react-textarea, @copilotkit/sqlite-runner, and @copilotkit/agentcore-runner.

`v1.59.5`

Compare Source

CopilotKit v1.59.5

A patch release on the 1.59 line. Improves A2UI recovery rendering in React chat, removes a noisy runtime license warning, reapplies the Intelligence threads examples rollout after the v1.59.4 backout, and hardens agent-assisted CI execution.

Install

npm install @&#8203;copilotkit/react-core@1.59.5 @&#8203;copilotkit/react-ui@1.59.5 @&#8203;copilotkit/runtime@1.59.5

Features

@copilotkit/react-core: A2UI recovery status renderer — Adds a recovery renderer for A2UI activity messages so restored surfaces show an explicit status while the UI is being reconstructed. The loader now stays mounted until the target surface can actually paint, then crosses over to the rendered surface instead of disappearing on a fixed delay. This avoids blank gaps and premature loader removal during replay/recovery flows. (#5228)
Examples: Intelligence threads rollout reapplied — Reapplies the Intelligence threads example work that was temporarily backed out in v1.59.4, including AgentCore, A2A A2UI, CrewAI Crews, Strands Python, and the wider examples set. The follow-up rollout keeps the thread drawer and Intelligence wiring in the examples while retaining the stability fixes from the backout window. (#5236, #5198, #5201, #5202, #5207)

Fixes

@copilotkit/runtime: remove spurious agents license warning — Agent runs no longer emit an incorrect license warning for the agents capability when the run path is valid. This removes a confusing warning from otherwise healthy runtime executions. (#5251)
@copilotkit/react-core: A2UI paint timing is tied to the actual surface — The recovery path keeps the A2UI surface mounted across the loader-to-surface transition, waits for real paint before swapping, and honors server-stamped debugExposure on recovery activity. Restored A2UI surfaces should now be less visually jarring and more deterministic in slow or replayed sessions. (#5228)

Build / packaging

Claude Code CI cleanup — CI now removes checked-out Claude settings and MCP config before running Claude Code on PR code. That keeps repository-local agent settings from influencing the workflow when the workflow is evaluating untrusted pull-request contents. (#4975)

Packages republished at `1.59.5`

@copilotkit/runtime, @copilotkit/react-core, @copilotkit/react-ui, @copilotkit/react-native, @copilotkit/core, @copilotkit/shared, @copilotkit/runtime-client-gql, @copilotkit/sdk-js, @copilotkit/voice, @copilotkit/web-inspector, @copilotkit/a2ui-renderer, @copilotkit/react-textarea, @copilotkit/sqlite-runner, @copilotkit/agentcore-runner, and @copilotkit/vue.

`v1.59.4`

Compare Source

CopilotKit v1.59.4

A patch release on the 1.59 line. Adds the first client/runtime pieces for Intelligence learning annotations, wires opt-in automatic A2UI tool injection through LangGraph middleware, gives Intelligence runs a persistent chat indicator, and makes release notifications deterministic.

Install

npm install @&#8203;copilotkit/react-core@1.59.4 @&#8203;copilotkit/react-ui@1.59.4 @&#8203;copilotkit/runtime@1.59.4

Features

@copilotkit/react-core: user-action learning hooks — Adds useLearnFromUserAction, useLearningContainers, and current-thread variants. Apps can record UI actions and set the learning containers associated with a thread through the app's CopilotKit runtime; the browser talks to POST /annotate, while the runtime resolves the Intelligence user and keeps the Intelligence API key server-side. (#4839)
```
const learnFromUserAction = useLearnFromUserAction();

await learnFromUserAction({
  threadId,
  title: "Renamed project",
  data: { previous: "Old name", next: "New name" },
});
```
@copilotkit/runtime: /annotate endpoint and Enterprise Learning MCP wiring — Adds the runtime-side annotation handler, request validation, platform error forwarding for 4xx responses, and CopilotKitIntelligence user resolution for annotation writes. When Enterprise Learning is enabled, real agent runs also receive the Intelligence MCP middleware with per-request auth headers, making the knowledge-base tools available through the same AG-UI middleware pipeline as other MCP tools. (#4839)
@copilotkit/sdk-js: automatic A2UI tool injection for LangGraph middleware — CopilotKitMiddleware can now auto-inject the A2UI generation tool when the frontend registered an A2UI catalog and the runtime opted into injectA2UITool. The middleware finds the catalog from either AG-UI state or CopilotKit runtime context, binds generated surfaces back to the catalog ID, and avoids advertising the tool when the client has not provided a renderable catalog. (#5161)
@copilotkit/react-core: persistent Intelligence indicator — Chat now shows a per-turn Intelligence indicator when the knowledge-base tool is used. It suppresses replay flashes with a grace window, shows an in-progress state while the tool call is unresolved, and settles into a quiet finished tag in message history instead of disappearing after the run completes. (#4839)

Fixes

@copilotkit/core: runtime transport switching is idempotent — setRuntimeTransport now no-ops when the requested transport mode is already active. This avoids unnecessary agent resets and subscriber churn during repeated configuration passes where the app reaffirms the same runtime transport rather than actually switching modes. (#5179)
Examples: Intelligence threads rollout backed out for stability — The initial Intelligence threads example rollout was reverted before this release so published examples stayed on the known-good path while the follow-up rollout was prepared. (#5217)

Docs

@copilotkit/core API reference — Adds reference documentation for the core package and exposes @copilotkit/core in the reference SDK picker, making the lower-level APIs easier to discover alongside the React and runtime references. (#5154)

Build / packaging

Automated release notifications — Adds a tested release-notification builder that produces one concise engineering-channel message for successful stable publishes, with guards for dry runs, skipped lanes, canaries, failures, and missing release URLs. (#5220)

Packages republished at `1.59.4`

@copilotkit/runtime, @copilotkit/react-core, @copilotkit/react-ui, @copilotkit/react-native, @copilotkit/core, @copilotkit/shared, @copilotkit/runtime-client-gql, @copilotkit/sdk-js, @copilotkit/voice, @copilotkit/web-inspector, @copilotkit/a2ui-renderer, @copilotkit/react-textarea, @copilotkit/sqlite-runner, @copilotkit/agentcore-runner, and @copilotkit/vue.

`v1.59.3`

Compare Source

CopilotKit v1.59.3

A patch release on the 1.59 line. Fixes generated thread titles in Intelligence mode, routes interrupt-resume Enter presses through the send path, and cleans up public docs and skills content after the docs migration.

Install

npm install @&#8203;copilotkit/react-core@1.59.3 @&#8203;copilotkit/react-ui@1.59.3 @&#8203;copilotkit/runtime@1.59.3

Fixes

@copilotkit/runtime: generated thread titles use the active agent context — Fixes ENT-732, where generated thread-name calls could derive their title from the wrong agent path. Thread titles now resolve against the agent that owns the conversation, so generated titles stay aligned with the actual agent/run instead of falling back to stale or generic context. (#5156)
@copilotkit/react-core: Enter sends during interrupt resume — During a human-in-the-loop resume turn, pressing Enter now follows the same serialized send path as clicking the send button. This prevents the keyboard shortcut from being interpreted as a stop/abort action while an interrupt is waiting for the user's response, which previously made the second turn feel like it disappeared or cancelled the active run.

Docs / skills

Docs authoring routed to the rendered docs source — Documentation authoring now points at the source tree used by the rendered docs experience, reducing drift between authored pages and what users actually read. This keeps future edits from landing in a legacy docs path that no longer represents the public site. (#5184)
Build-with-agents skills docs expanded — The Skills section now appears consistently across the build-with-agents pages, with tighter install wording and corrected MCP heading nesting. The resulting pages make the CLI install path and project-scope skill installation flow clearer for agent builders. (#5194)
Internal-only skills removed from the public repository — Drops private agent skills that should not be distributed from the public CopilotKit repo, while keeping the public skill surface intact. (#5187)
Self-hosting guide link repair — Fixes broken links in the premium self-hosting guide after the docs cutover so readers are routed to the intended troubleshooting and configuration pages. (#5188)

Build / packaging

Fork PR format checkout fixed — The formatting workflow now checks out the head branch from forked pull requests correctly, so format checks run against the contributor's actual change instead of the wrong ref. (#5164)

Packages republished at `1.59.3`

@copilotkit/runtime, @copilotkit/react-core, @copilotkit/react-ui, @copilotkit/react-native, @copilotkit/core, @copilotkit/shared, @copilotkit/runtime-client-gql, @copilotkit/sdk-js, @copilotkit/voice, @copilotkit/web-inspector, @copilotkit/a2ui-renderer, @copilotkit/react-textarea, @copilotkit/sqlite-runner, @copilotkit/agentcore-runner, and @copilotkit/vue.

`v1.59.2`

Compare Source

CopilotKit v1.59.2

A patch release on the 1.59 line. Hardens the built-in tool-call rendering path across React and Vue, fixes a same-thread human-in-the-loop interrupt regression, and adds stable chat UI test IDs for applications that automate or assert against CopilotKit-rendered messages.

Install

npm install @&#8203;copilotkit/react-core@1.59.2 @&#8203;copilotkit/react-ui@1.59.2 @&#8203;copilotkit/runtime@1.59.2

Fixes

@copilotkit/react-core: default tool-call renderer is defensive by default — The built-in renderer now tolerates unknown status values, absent toolCallIds, component-typed render props, missing or non-string result payloads, and JSON values that cannot be safely stringified. Unknown-status warnings are deduplicated, stringify failures are logged without breaking the chat surface, and the default renderer keeps enough toolCallId context for custom renderers and tests to correlate tool lifecycle events. (#5116)
@copilotkit/react-core: consecutive interrupts in one thread render correctly — Fixes a same-thread interrupt flow where resolving one interrupt and receiving another could leave the second interrupt without a mounted card. useInterrupt also guards consumer enabled predicates and handlers so an application exception is surfaced as a controlled hook error path instead of taking down the interrupt renderer. (#5115)
@copilotkit/vue: default tool-call renderer matches the React hardening — Vue's default renderer now carries the same status normalization, toolCallId forwarding, typeless-result handling, unknown-status warning dedupe, and safe-stringify behavior as React. This keeps cross-framework renderer behavior aligned for apps that share test fixtures or custom tool rendering assumptions between React and Vue. (#5116)

UI / testing

Stable chat UI test IDs — Adds durable data-testid attributes for the built-in default tool-call renderer, error banner, loading indicator, and related message-view affordances. The intent is to give downstream E2E suites a stable contract that does not depend on internal DOM structure or visual class names. (#5110)

Build / packaging

Static bundle-size and ES compatibility checks — Adds package-level bundle-size measurement and ES compatibility checks to catch accidental client bundle growth or unsupported syntax before publish. The checks cover the publishable package entry points rather than relying only on application-level builds. (#5051)

Packages republished at `1.59.2`

@copilotkit/runtime, @copilotkit/react-core, @copilotkit/react-ui, @copilotkit/react-native, @copilotkit/core, @copilotkit/shared, @copilotkit/runtime-client-gql, @copilotkit/sdk-js, @copilotkit/voice, @copilotkit/web-inspector, @copilotkit/a2ui-renderer, @copilotkit/react-textarea, @copilotkit/sqlite-runner, @copilotkit/agentcore-runner, and @copilotkit/vue.

`v1.59.1`

Compare Source

CopilotKit v1.59.1

A patch release on the 1.59 line. Closes an ENT-658 regression where SDK-generated (non-explicit) threads could visibly reset the chat — losing the user message, tool card, and assistant reply — during a frontend-tool round-trip, and bumps @copilotkit/license-verifier onto a ~0.4.2 patch range.

Install

npm install @&#8203;copilotkit/react-core@1.59.1 @&#8203;copilotkit/react-ui@1.59.1 @&#8203;copilotkit/runtime@1.59.1

Fixes

@copilotkit/react-core: preserve generated-thread frontend-tool follow-ups — Fixes a visible chat reset (ENT-658) on threads where the SDK generates the threadId and /connect is intentionally skipped. The reset had two independent frontend causes, both in @copilotkit/react-core:
- CopilotChat: non-explicit threads skip /connect, but the first runAgent still has to ship the same SDK-generated threadId the chat UI is rendering. agent.threadId = resolvedThreadId now runs at the top of the connect effect — before the early return for non-explicit threads — so the chat and agent can no longer diverge when the SDK mints the thread.
- CopilotKitProvider: default object props (headers, properties, agents__unsafe_dev_only, selfManagedAgents) now resolve to shared frozen singletons (EMPTY_HEADERS / EMPTY_PROPERTIES / EMPTY_AGENTS) instead of fresh {} literals. In Intelligence mode a provider rerender could otherwise re-sync an empty local agent registry and replace the live remote agent instance mid-run, dropping the in-memory chat stream.
Regression coverage added in CopilotChat.absentThreadConnect.test.tsx (generated-thread frontend-tool round-trip) and CopilotKitProvider.stability.test.tsx (empty-agent rerender stability), plus a langgraph-python showcase demo, aimock fixture, and Playwright smoke for the repro. (#5043)

Build / packaging

@copilotkit/license-verifier bumped to ~0.4.2 — Moves the dependency off the exact 0.4.0 pin to the patch range ~0.4.2 (>=0.4.2 <0.5.0) in the root pnpm.overrides, @copilotkit/runtime, and @copilotkit/shared; pnpm-lock.yaml regenerated to resolve 0.4.2. Future 0.4.x patches are now picked up automatically while 0.5.0+ still requires an intentional bump. The .npmrc minimum-release-age guard was not modified. (#5100)

Packages republished at `1.59.1`

@copilotkit/runtime, @copilotkit/react-core, @copilotkit/react-ui, @copilotkit/react-native, @copilotkit/core, @copilotkit/shared, @copilotkit/runtime-client-gql, @copilotkit/sdk-js, @copilotkit/voice, @copilotkit/web-inspector, @copilotkit/a2ui-renderer, @copilotkit/react-textarea, @copilotkit/sqlite-runner, @copilotkit/agentcore-runner, and @copilotkit/vue.

`v1.59.0`

Compare Source

CopilotKit v1.59.0

A minor release on the 1.59 line. Adds deterministic manual tool-call IDs across the JS and Python SDK helpers, fixes explicit-thread routing from React into runtime agents, hardens Python SDK header propagation, repairs MCP Apps schemas for Zod 4, and consolidates prerelease/stable publishing onto one OIDC-backed workflow.

Install

npm install @&#8203;copilotkit/react-core@1.59.0 @&#8203;copilotkit/react-ui@1.59.0 @&#8203;copilotkit/runtime@1.59.0

Features

@copilotkit/sdk-js and Python SDK: manual tool-call IDs — copilotkitEmitToolCall / copilotkit_emit_tool_call can now accept a caller-provided tool-call ID and return the ID that was used. When omitted, the helpers still generate a UUID. This gives apps a stable correlation key for manually emitted tool calls, retries, and tests that need to match AG-UI TOOL_CALL_* events to application state. (#4923)
```
const toolCallId = await copilotkitEmitToolCall(
  config,
  "SearchTool",
  { query: "CopilotKit" },
  { toolCallId: "search-1" },
);
```
```
tool_call_id = await copilotkit_emit_tool_call(
    config,
    name="SearchTool",
    args={"query": "CopilotKit"},
    tool_call_id="search-1",
)
```

Fixes

@copilotkit/react-core: explicit threadId reaches the runtime agent — Fixes a bridge bug where a threadId passed through the React provider/chat configuration could fail to propagate onto the agent object used by runtime connect/run calls. Explicit-thread apps now keep the UI thread, agent thread, and runtime request thread aligned, which prevents generated or stale thread IDs from taking over a conversation that the application intentionally scoped. (#5042)
Python SDK: forwarded headers stay out of prompts and reach async clients — The Python header-propagation layer now walks wrapped ._client chains to find the underlying httpx client, installs the correct sync or async request hook, and remains idempotent across repeated installs. It also strips copilotkit_forwarded_headers from app context / exposed state before those values can reach an LLM prompt. The forwarded headers are still available to outbound provider HTTP calls, but no longer leak into model-visible context. (#5096)
Python SDK: AG-UI manual dispatch is fail-loud and balanced — Manual message/tool-call dispatch now validates names, IDs, and JSON-serializable args consistently; wraps dispatch failures with tool and ID context; avoids swallowing CancelledError; and emits a compensating TOOL_CALL_END if a tool-call dispatch starts but fails before the normal end event. This keeps malformed manual emissions from producing half-open AG-UI streams. (#4923)
MCP Apps renderers: Zod 4-compatible z.record schemas — The React and Vue MCP Apps activity renderers now use the two-argument z.record(z.string(), valueSchema) form required by Zod 4 while remaining valid under Zod 3. A lint rule now blocks reintroducing the single-argument form in package code. (#5025)
Python SDK: AG-UI agent metadata serializes safely — The Python AG-UI agent now serializes metadata defensively so non-JSON-native values do not crash event conversion. (#5036)

Docs

Docs navigation, search, and link repair — Improves the docs search/sidebar experience, restores the new-look docs preview, adds a v1 reference version selector, fixes legacy/external redirects after the docs cutover, and repairs shared error anchors and unsupported-framework links. (#5034, #5050, #5057, #5061, #5065, #5067, #5079, #5081, #5086, #5094)
AWS Strands TypeScript samples — Adds TypeScript examples alongside the AWS Strands docs snippets, including quickstart, frontend tools, shared state, and generative UI pages. (#5033)

Build / packaging

Release publishing consolidated onto publish-release.yml — The old prerelease workflow was folded into the main publish workflow, with workflow_dispatch prerelease mode, dry-run guards, explicit post-publish success gates, release-summary protection for empty versions, and OIDC trusted-publishing permissions carried through the reusable path. This keeps stable and prerelease publishes on one tested implementation instead of two diverging workflows. (#5063, #5068, #5071)
Python SDK publishing moved to PyPI trusted publishing — Adds a testable PyPI version-change detector, fails loud on malformed PyPI responses or tag-push problems, ignores yanked releases when comparing versions, and publishes via OIDC trusted publishing instead of a long-lived token. (#5097)
@copilotkit/voice: runtime moved to a peer dependency — Moves @copilotkit/runtime out of dependencies and into peerDependencies for the voice package so consumers do not get an extra runtime copy pulled into voice-only installs. (#5055)

Packages republished at `1.59.0`

@copilotkit/runtime, @copilotkit/react-core, @copilotkit/react-ui, @copilotkit/react-native, @copilotkit/core, @copilotkit/shared, @copilotkit/runtime-client-gql, @copilotkit/sdk-js, @copilotkit/voice, @copilotkit/web-inspector, @copilotkit/a2ui-renderer, @copilotkit/react-textarea, @copilotkit/sqlite-runner, @copilotkit/agentcore-runner, and @copilotkit/vue.

`v1.58.0`

Compare Source

CopilotKit v1.58.0

A minor release on the 1.5 line. Ships pre-built UI for @copilotkit/react-native — CopilotChat, CopilotModal, a useRenderTool hook, and a streaming Markdown component — closing the parity gap with the web SDK, which previously left React Native as a headless-only target.

Install

npm install @&#8203;copilotkit/react-core@1.58.0 @&#8203;copilotkit/react-ui@1.58.0 @&#8203;copilotkit/runtime@1.58.0

For React Native:

npm install @&#8203;copilotkit/react-native@1.58.0

Features

@copilotkit/react-native: pre-built chat UI — Adds CopilotChat (a FlatList-based message view with tool-call rendering via useRenderToolRegistry, error states, empty state with suggestion pills, KeyboardAvoidingView wrapping, extraData-driven re-renders, and a FlatListComponent prop for bottom-sheet compatibility), CopilotModal (a bottom-sheet overlay using @gorhom/bottom-sheet's BottomSheetFlatList for gesture-safe scrolling, configurable snap points, imperative open() / close() API, and disableKeyboardAvoiding to prevent double-avoidance when embedding inside another keyboard-aware view), AssistantMessage / UserMessage chat bubbles, a TypingIndicator animation, and a CopilotMarkdown component that wraps Software Mansion Labs' react-native-streamdown for streaming-friendly markdown in AI responses. A new useRenderTool hook plus RenderToolContext register tools and their renderers through useSyncExternalStore; RenderToolProvider is auto-wrapped by CopilotKitProvider so no extra wiring is required. The package previously shipped headless (hooks + transport) and could only render via consumer-supplied components; React Native apps can now drop in the same chat surface the web SDK provides. (#4715)

Packages republished at `1.58.0`

@copilotkit/runtime, @copilotkit/react-core, @copilotkit/react-ui, @copilotkit/react-native, @copilotkit/core, @copilotkit/shared, @copilotkit/runtime-client-gql, @copilotkit/sdk-js, @copilotkit/voice, @copilotkit/web-inspector, @copilotkit/a2ui-renderer, @copilotkit/react-textarea, @copilotkit/sqlite-runner, @copilotkit/agentcore-runner, and @copilotkit/vue.

`v1.57.4`

Compare Source

CopilotKit v1.57.4

A patch release on the 1.57 line. Closes a header-propagation gap that silently dropped forwarded x-* headers for LangGraphAgent (and the matching Python SDK middleware), adds a closed-beta user-memory configuration section to the self-hosting docs, moves the runtime's anonymous telemetry transport behind a CopilotKit-controlled endpoint (opt-out unchanged), and migrates the npm publish pipeline to OIDC trusted publishers after the long-lived NPM_TOKEN secrets expired.

Install

npm install @&#8203;copilotkit/react-core@1.57.4 @&#8203;copilotkit/react-ui@1.57.4 @&#8203;copilotkit/runtime@1.57.4

Fixes

@copilotkit/runtime: close header-propagation gap for LangGraphAgent — extractForwardableHeaders() (PR #4773, v1.57.2) wired all x-* headers from the browser through AG-UI to the LLM call, but agent-utils.ts gated the call behind if (agent.headers) — falsy for LangGraphAgent, which has no pre-configured headers — so forwarded headers were silently dropped for the most common LangGraph deployment shape. The guard is removed; the Python SDK's CopilotKitMiddleware now installs an install_httpx_hook so forwarded x-* headers also propagate to outgoing LLM API calls made via httpx. Seven regression tests pin the behavior end-to-end (red-green verified). Unblocks showcase fixture isolation that relies on X-AIMock-Context reaching aimock. (#4951)

Docs

Premium self-hosting: user memory (closed beta) — Adds a public <Callout> and a password-gated configuration sub-section to /premium/self-hosting covering the per-user / per-org / per-project / read-only user-memory capability and the two flips to enable it (appApi.env: [{ name: SL_ENABLED, value: "true" }] on app-api, mcpServer: true on the CopilotKitIntelligence constructor in @copilotkit/runtime/v2). Heading sits outside the gate so it's visible in the TOC; body is gated with the existing <InsecurePasswordProtected> component. (#4928)

Build / packaging

npm publish moved to OIDC trusted publishers — All three long-lived publish tokens (copilotkit-ci-publish, ag-ui-ci-publish, aimock-gh-release) expired on May 19. publish-release.yml and prerelease.yml now request id-token: write and authenticate via OIDC trusted publishers (configured for all 20 packages via npm trust github); ephemeral tokens, never expire. Implementation pins pnpm pack + npx npm@11.15.0 publish (npm 11 carries the OIDC client) on Node 22 and unsets NODE_AUTH_TOKEN in the publish step so the expired secret can't take precedence. A workflow_dispatch trigger was added for manual recovery. (#4974, #4976)
repository.url backfilled for OIDC provenance — The first v1.57.4 OIDC publish attempt got 1/15 packages out before failing on agentcore-runner with E422 ("missing repository.url"). Added repository.url to @copilotkit/agentcore-runner, @copilotkit/core, @copilotkit/sqlite-runner, @copilotkit/voice, and @copilotkit/web-inspector — required by npm OIDC provenance verification. (#4977)
Idempotent publish script — publish-release.ts now queries npm for each package's current version before publishing and skips anything already on the registry, so a partial-failure recovery (like the 1/15 v1.57.4 situation) is a safe retry instead of a one-shot custom workflow. (#4979)

Telemetry

Runtime telemetry transport moved behind a CopilotKit-controlled endpoint — Anonymous, event-level telemetry from @copilotkit/runtime now POSTs to telemetry.copilotkit.ai so vendor changes can be made server-side without an SDK release. No message content, prompts, completions, or agent state is sent; customer cloud API keys are stripped at the wire. Existing opt-out via COPILOTKIT_TELEMETRY_DISABLED / DO_NOT_TRACK is unchanged. (#4507)

Packages republished at `1.57.4`

@copilotkit/runtime, @copilotkit/react-core, @copilotkit/react-ui, @copilotkit/react-native, @copilotkit/core, @copilotkit/shared, @copilotkit/runtime-client-gql, @copilotkit/sdk-js, @copilotkit/voice, @copilotkit/web-inspector, @copilotkit/a2ui-renderer, @copilotkit/react-textarea, @copilotkit/sqlite-runner, and @copilotkit/agentcore-runner.

`v1.57.3`

Compare Source

CopilotKit v1.57.3

A patch release on the 1.57 line. Re-publishes the monorepo to repair an issue in the 1.57.2 artifacts. Otherwise, no new changes.

Install

npm install @&#8203;copilotkit/react-core@1.57.3 @&#8203;copilotkit/react-ui@1.57.3 @&#8203;copilotkit/runtime@1.57.3

Fixes

Re-publishes the 1.57 line — 1.57.2 shipped a broken artifact. 1.57.3 re-cuts every package in the monorepo scope at a single matching version so installs and peer-dep resolution line up across the 1.57 line. No behavior changes versus 1.57.2.

Packages republished at `1.57.3`

@copilotkit/runtime, @copilotkit/react-core, @copilotkit/react-ui, @copilotkit/react-native, @copilotkit/vue, @copilotkit/core, @copilotkit/shared, @copilotkit/runtime-client-gql, @copilotkit/sdk-js, @copilotkit/voice, @copilotkit/web-inspector, @copilotkit/a2ui-renderer, @copilotkit/react-textarea, @copilotkit/sqlite-runner, and @copilotkit/agentcore-runner.

`v1.57.2`

Compare Source

CopilotKit v1.57.2

A patch release on the 1.57 line. Brings @copilotkit/react-native to full v2 API parity with chat UI components and a native useAttachments hook over expo-document-picker/expo-file-system, adds a position prop on the v2 CopilotSidebar and a followUp option on useComponent, ships anonymous interaction telemetry on @copilotkit/web-inspector (env-var-gated, propagated through the runtime), widens SDK header forwarding from x-aimock-* to all x-* prefixes, and fixes a thread-switch state-reset bug that produced duplicate inspector events and "Message not found" toasts under React effect churn.

Install

npm install @&#8203;copilotkit/react-core@1.57.2 @&#8203;copilotkit/react-ui@1.57.2 @&#8203;copilotkit/runtime@1.57.2

Features

@copilotkit/react-native full v2 API parity — Ships the v2 chat-component suite for React Native: a headless CopilotChat (with useCopilotChatContext and submitMessage(InputContent[])), a CopilotPopup floating overlay with FAB, a CopilotModal, and a CopilotSidebar. Native file attachments arrive via a new useAttachments hook backed by expo-document-picker + expo-file-system and a NativeFileInput descriptor (uri / name / size / mimeType) that replaces the web File object; NativeAttachmentsConfig mirrors the shared AttachmentsConfig (onUpload, onUploadFailed, accept, maxSize). CopilotKitProvider now accepts a dynamic headers function and a credentials prop, and the package re-exports 15+ types from the v2 headless layer (including InterruptEvent, ReactFrontendTool, ReactHumanInTheLoop). expo-document-picker (≥12) and expo-file-system (≥17) are optional peer deps. (#4750)
```
import {
  CopilotKitProvider,
  CopilotChat,
  useAttachments,
} from "@&#8203;copilotkit/react-native";

function Chat() {
  const attachments = useAttachments({
    config: { enabled: true, maxSize: 20 * 1024 * 1024 },
  });
  return <CopilotChat attachments={attachments} />;
}
```
position prop on CopilotSidebar — The v2 CopilotSidebar can now anchor to either side of the viewport. The prop flips the fixed anchor, the border side, the off-screen translate direction, and the body push margin (marginInlineStart vs marginInlineEnd) so the layout mirrors correctly, and CopilotSidebarView passes a position-aware className override into the toggle slot so the floating FAB mirrors with the panel (left-6 + right-auto, merged via tailwind-merge so the default right-6 is dropped). Defaults to "right" for backward compatibility. (#4710)
```
<CopilotSidebar position="left" defaultOpen />
```
followUp option in useComponent — useComponent wraps useFrontendTool but was silently dropping followUp. The option is now forwarded through so a registered component renderer can disable the automatic follow-up turn the same way a hand-rolled frontend tool does. (#4897)
```
useComponent({
  name: "renderProfile",
  parameters: z.object({ userId: z.string() }),
  render: ProfileCard,
  followUp: false,
});
```
Anonymous interaction telemetry in @copilotkit/web-inspector — The inspector now fires three V1 funnel events directly from the browser to https://telemetry.copilotkit.ai/ingest — oss.inspector.banner_viewed, oss.inspector.banner_clicked, and oss.inspector.threads_tab_clicked — with a UUID v4 distinct ID persisted in localStorage and sent both in the POST body and as the X-CopilotKit-Telemetry-Id header (the ingest lambda parses the header for de-aliasing). Banner CTA links are decorated with ?posthog_distinct_id=<uuid> so the destination site can posthog.alias() and close the banner_viewed → banner_clicked → signup_attributed funnel. Telemetry can be disabled at the runtime layer via the COPILOTKIT_TELEMETRY_DISABLED or DO_NOT_TRACK env var — RuntimeInfo.telemetryDisabled propagates through AgentRegistry and CopilotKitCore, gating `tra

✂ Note

PR body was truncated to here.

Configuration

📅 Schedule: (UTC)

Branch creation
- At any time (no schedule defined)
Automerge
- At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

vercel · 2026-05-26T18:09:52Z

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
mcp-client	Error		Jul 18, 2026 4:18pm

linear · 2026-07-16T07:36:57Z

ENT-732

renovate Bot added the copilotkit label May 26, 2026

vercel Bot had a problem deploying to Preview May 26, 2026 18:10 Failure

renovate Bot force-pushed the renovate/copilotkit-dependencies branch from 8bd51b1 to 304ad7e Compare May 30, 2026 12:05

renovate Bot changed the title ~~Update CopilotKit dependencies to v1.58.0~~ Update CopilotKit dependencies to v1.59.1 May 30, 2026

vercel Bot had a problem deploying to Preview May 30, 2026 12:06 Failure

renovate Bot force-pushed the renovate/copilotkit-dependencies branch from 304ad7e to d13cc7c Compare June 5, 2026 07:40

renovate Bot changed the title ~~Update CopilotKit dependencies to v1.59.1~~ Update CopilotKit dependencies to v1.59.5 Jun 5, 2026

vercel Bot had a problem deploying to Preview June 5, 2026 07:42 Failure

renovate Bot force-pushed the renovate/copilotkit-dependencies branch from d13cc7c to 9de385d Compare June 12, 2026 13:44

renovate Bot changed the title ~~Update CopilotKit dependencies to v1.59.5~~ Update CopilotKit dependencies to v1.60.0 Jun 12, 2026

vercel Bot had a problem deploying to Preview June 12, 2026 13:45 Failure

renovate Bot force-pushed the renovate/copilotkit-dependencies branch from 9de385d to ac7fb15 Compare June 14, 2026 03:51

renovate Bot changed the title ~~Update CopilotKit dependencies to v1.60.0~~ Update CopilotKit dependencies to v1.60.1 Jun 14, 2026

vercel Bot had a problem deploying to Preview June 14, 2026 03:52 Failure

renovate Bot force-pushed the renovate/copilotkit-dependencies branch from ac7fb15 to 01d7ef3 Compare June 20, 2026 19:58

renovate Bot changed the title ~~Update CopilotKit dependencies to v1.60.1~~ Update CopilotKit dependencies to v1.61.0 Jun 20, 2026

vercel Bot had a problem deploying to Preview June 20, 2026 19:59 Failure

renovate Bot force-pushed the renovate/copilotkit-dependencies branch from 01d7ef3 to ab3f678 Compare June 24, 2026 00:05

renovate Bot changed the title ~~Update CopilotKit dependencies to v1.61.0~~ Update CopilotKit dependencies to v1.61.1 Jun 24, 2026

vercel Bot had a problem deploying to Preview June 24, 2026 00:06 Failure

renovate Bot force-pushed the renovate/copilotkit-dependencies branch from ab3f678 to 573a56f Compare June 26, 2026 04:17

renovate Bot changed the title ~~Update CopilotKit dependencies to v1.61.1~~ Update CopilotKit dependencies to v1.61.2 Jun 26, 2026

vercel Bot had a problem deploying to Preview June 26, 2026 04:18 Failure

renovate Bot force-pushed the renovate/copilotkit-dependencies branch from 573a56f to b3d28e8 Compare July 4, 2026 08:11

renovate Bot changed the title ~~Update CopilotKit dependencies to v1.61.2~~ Update CopilotKit dependencies to v1.62.2 Jul 4, 2026

vercel Bot had a problem deploying to Preview July 4, 2026 08:13 Failure

renovate Bot force-pushed the renovate/copilotkit-dependencies branch from b3d28e8 to 481faac Compare July 16, 2026 07:36

renovate Bot changed the title ~~Update CopilotKit dependencies to v1.62.2~~ Update CopilotKit dependencies to v1.63.0 Jul 16, 2026

vercel Bot had a problem deploying to Preview July 16, 2026 07:37 Failure

Update CopilotKit dependencies to v1.63.1

b457689

renovate Bot force-pushed the renovate/copilotkit-dependencies branch from 481faac to b457689 Compare July 18, 2026 16:16

renovate Bot changed the title ~~Update CopilotKit dependencies to v1.63.0~~ Update CopilotKit dependencies to v1.63.1 Jul 18, 2026

vercel Bot had a problem deploying to Preview July 18, 2026 16:18 Failure

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Update CopilotKit dependencies to v1.63.1#8

Update CopilotKit dependencies to v1.63.1#8
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/copilotkit-dependencies

renovate Bot commented May 26, 2026 •

edited

Loading

Uh oh!

vercel Bot commented May 26, 2026 •

edited

Loading

Uh oh!

linear Bot commented Jul 16, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Uh oh!

Conversation

renovate Bot commented May 26, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

CopilotKit v1.60.2

Install

Features

Fixes

Dependencies

Docs

CI / release

Packages republished at 1.60.2

CopilotKit v1.60.1

Install

Dependencies

Docs

Packages republished at 1.60.1

CopilotKit v1.60.0

Install

New packages

Features

Fixes

Dependencies

Packages republished at 1.60.0

CopilotKit v1.59.5

Install

Features

Fixes

Build / packaging

Packages republished at 1.59.5

CopilotKit v1.59.4

Install

Features

Fixes

Docs

Build / packaging

Packages republished at 1.59.4

CopilotKit v1.59.3

Install

Fixes

Docs / skills

Build / packaging

Packages republished at 1.59.3

CopilotKit v1.59.2

Install

Fixes

UI / testing

Build / packaging

Packages republished at 1.59.2

CopilotKit v1.59.1

Install

Fixes

Build / packaging

Packages republished at 1.59.1

CopilotKit v1.59.0

Install

Features

Fixes

Docs

Build / packaging

Packages republished at 1.59.0

CopilotKit v1.58.0

Install

Features

Packages republished at 1.58.0

CopilotKit v1.57.4

Install

Fixes

Docs

Build / packaging

Telemetry

Packages republished at 1.57.4

CopilotKit v1.57.3

Install

Fixes

Packages republished at 1.57.3

CopilotKit v1.57.2

Install

Features

renovate Bot commented May 26, 2026 •

edited

Loading

Packages republished at `1.60.2`

Packages republished at `1.60.1`

Packages republished at `1.60.0`

Packages republished at `1.59.5`

Packages republished at `1.59.4`

Packages republished at `1.59.3`

Packages republished at `1.59.2`

Packages republished at `1.59.1`

Packages republished at `1.59.0`

Packages republished at `1.58.0`

Packages republished at `1.57.4`

Packages republished at `1.57.3`

vercel Bot commented May 26, 2026 •

edited

Loading